Fix double free in psl_load_fp(), found by fuzzing

2017-06-09 22:53:19 +02:00 · 2017-06-09 22:53:19 +02:00 · 045bf63031
parent bce2e9acb0
commit 045bf63031
1 changed files with 2 additions and 0 deletions
--- a/src/psl.c
+++ b/src/psl.c
@ -1161,6 +1161,8 @@ psl_ctx_t *psl_load_fp(FILE *fp)
 		/* release unused memory */
 		if ((m = realloc(psl->dafsa, len)))
 			psl->dafsa = m;
+		else if (!len)
+			psl->dafsa = NULL; // realloc() just free'd psl->dafsa

 		psl->dafsa_size = len;
 		psl->utf8 = !!GetUtfMode(psl->dafsa, len);